[Snort-devel] Snort Beginner

Anju Jyothish anjupanicker.ms at ...2499...
Sat Mar 3 15:13:53 EST 2012


Hi,I have a question. When snort reads packets from a pcap file, does it
follow a different path; or is it processed in the same manner as a packet
from the ethernet/

Thanks,
Anju
On Wed, Jan 4, 2012 at 12:26 PM, Anju Jyothish <anjupanicker.ms at ...2499...>wrote:

> Hello,
>
> I am working on a project with snort. According to Martin there is no
> documentation in snort that would help developers. He advised me to ask
> specific questions to the team.
>
> Here is my problem. I want to collect the grouped packets in
> group-specific buffers, collect the rule contents applicable to those
> packets, and then play with the A-C algorithm. The code is enormous and I
> would like some pointers as to where to look at.
>
> Any help would be highly appreciated.
>
> Thanking in anticipation,
> Anju
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20120303/3762cda0/attachment.html>


More information about the Snort-devel mailing list